Open Hardware on Its Own Doesn’t Solve the Trust Problem

Re:Open Hardware on Its Own Doesn’t Solve the Trust Problem by vardump on Friday December 27, 2019 @10:29AM (#21891827)

> That's true, but if I'm reading the subtext of your post correctly, you're saying that this is pointless, and I don't think it is.

I'm not saying this is pointless at all! Just that so far there seems to always be another layer that can be used to circumvent the protections.

I guess I'm more like saying we should not ever take security for granted. Instead, we should look at the whole system and try to find the easiest attack vectors. Which might not be purely software issues anymore.

For example, at some point we might need to consider the physical effects of the code being executed or how the physical environment can affect it.

When the software is sufficiently strong, the attacks will be directly or indirectly against the hardware.

[ Parent | on HN ]

Re:Open Hardware on Its Own Doesn’t Solve the Trust Problem by kerkeslager on Friday December 27, 2019 @11:20AM (#21892158)

I think we're in agreement, then. I'm sorry for accusing you of saying something you didn't say!

[ Parent | on HN ]

Re:Open Hardware on Its Own Doesn’t Solve the Trust Problem by jacquesm on Friday December 27, 2019 @10:55AM (#21891978)

So far though, software has been the soft underbelly of secure systems. The hardware is assumed to be compromised at a level that is shockingly bad and nobody seems to care, we just accept it and move on (IME, PSP, TrustZone).

[ Parent | on HN ]